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(57) Abstract 

An interactive transaction management multimedia system (10) includes a transaction terminal (12) having a compact disk drive (20) 
for accessing a multiplicity of encrypted CD mass storage elements (22) that are serialized by a unique machine-readable code (24), the 
disk drive including a code reader (23); an audio/video output interface (30) for feeding portions of the recorded data to an output device 
(14, 16); and a transaction interface (28) for two-way communications with an external facility (42). A transaction processing facility (TPF) 
(40) of the system includes a database processor (46); a terminal interface (44) for communicating with the transaction interface; and an 
optional provider interface (52) for bidirectional electronic communications with a plurality of vendors. Use of the mass storage element 
is authorized or metered by correlating transactions in the elements using an index (48) of the serial codes. Also disclosed are a memory 
system (12) incorporating the disk drive and a method (300) for producing the serialized elements. 
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INTERACTIVE TRANSACTION MANAGEMENT MULTIMEDIA SYSTEM 



The present invention relates to multimedia 
systems using mass storage elements such as compact disks 
5 for accessing protected information, and to the application 
of such systems to personalized transaction management. 

Multimedia systems are a relatively recent 
development combining computer and mass storage such as 
compact disk (CD) technology for efficiently accessing works 

10 including encyclopedias, vendor catalogs, nationwide 

telephone listings, legal and technical databases, video 
games, audio recordings, and video recordings such as full 
length movies. Such systems avoid the problems of accessing 
large quantities of data over telephone lines, for example, 

15 which include severe bandwidth limitations and significant 
utility charges. A major problem in this field is the 
prohibitively high cost of purchasing the stored works 
outright, particularly in the case of first-run full length 
movies in the first part of their home video rental release 

20 window. 

It is known to encrypt stored data for permitting 
use thereof only by those having authorized access. It is 
also known to charge users according to the quantity of data 
that is decrypted. See, for example, U.S. Patent No. 
25 5,050,213 to Shear, which discloses a database metering and 
protection system and method. 

A problem with the prior art, even as advanced by 
the disclosure of Shear, is that point of sale mark-ups are 
difficult and impractical to apportion according to use of 

30 the data. For example, a movie recording might be procured 
for unlimited private viewing, but for first run full length 
movies the charges would be very high as compared with 
viewing rights for a limited period such as 24 hours. 
Present marketing systems are not set up for handling both 

35 kinds of transactions for a single mass produced copy of a 
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particular work. Also, there is no practical way to both 
meter authorized uses of the media while policing pirated 
copies. Thus many markets for multimedia products such as 
rental first-run movies are not being adequately served. 

Thus there is a need for a multimedia system that 
supports a flexible marketing strategy including 
compensation for retailers that can be apportioned according 
to use of the stored works. 
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SUMMARY 

The present: invention meets this need by providing 
an interactive multimedia system for providing personalized 
transaction management. In one aspect of the invention , the 
5 system includes a transaction terminal having a terminal 
drive unit for accessing at least one mass storage element 
containing recorded data, an audio/video output interface 
for feeding portions of the recorded data to one or more 
output devices, a transaction interface for bidirectional 

10 electronic communications with an external facility, and 

terminal control means for activating the output interface 
and the transaction interface in response to operator input; 
a transaction processing facility (TPF) having a database 
processor and a terminal interface for bidirectional 

15 electronic communications between the transaction interface 
and the database processor; means for correlating the mass 
storage element with a transaction involving a particular 
one of the vendors; and means for metering use of the 
element based on particulars of the transaction* The TPF 

20 can have a provider interface for bidirectional electronic 
communications between a plurality of vendors and the 
database processor, the means for correlating being 
implemented for identifying specific vendors having rights 
in the elements, and the means for metering being 

25 implemented for crediting particular vendors according to 
usage of the associated mass storage elements. As used 
herein, the term "vendor" means an entity that directly or 
indirectly makes a contribution to the value of the mass 
storage element. The contribution can be related to the 

30 creation, production and/or sale of the mass storage 

element. The term "metering" means limiting the use as to 
the amount of the recorded data permitted to be read from 
the terminal drive unit, the number of times the recorded 
data is permitted to be read, the time duration of the use, 

35 or the duration of one or more periods of time within which 
the use is permitted, or any combination thereof. 
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The terminal control means can have a handheld 
remote control unit for receiving at least a portion of the 
operator input. Preferably the transaction terminal 
includes a key memory for storing user authorization data to 
5 be compared with user input, the control means inhibiting at 
least some operations of the first drive unit unless the 
user input matches a predetermined portion of the 
authorization data. The system can further include means 
for updating the key memory using the transaction interface. 

10 The authorization data can include a key code, the means for 
correlating the mass storage element including an index of 
key codes and mass storage elements authorized for use under 
respective ones of the key codes. Preferably the system is 
capable of updating the index based on use of the mass 

15 storage element, for efficiently implementing the metering. 
The index can further include identification of vendors 
having prospective rights in the authorized use of the mass 
storage elements. 

The mass storage element can be one of a 

20 multiplicity of elements having the recorded data 

corresponding to identical information and including a work 
identifier, the terminal control means being operative for 
signaling the work identifier to the TPF using the 
transaction interface, the index having for each of the 

25 elements a unique serial identifier, the means for 

correlating the mass storage element further including means 
for locating a particular serial identifier in the index 
using the work identifier and key code as signaled from the 
terminal drive unit? and means for reading the particular 

3 0 one of the vendors from the index by association with the 
serial identifier. As used herein, the phrase "elements 
having the recorded data corresponding to identical 
information" means any of (a) the same data is identically 
recorded on each of the elements; (b) the same data is 

35 recorded on each of the elements as modified by one of a 

plurality of fixed functions (such as by encryption) ; and/or 
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(c) the same data is recorded on each of the elements 
together with additional information. 

The terminal can include a key interface for 
interrogating an authorization key device. The key device 
5 can be an encoded card, the key interface being operative 
for signaling a key code from the card to the terminal 
control means, the user input including insertion of the key 
device. The transaction terminal can be operative for 
comparing the key code to a plurality of authorization 

10 codes, each of the authorization codes corresponding to a 
separate user account. Preferably the key device includes 
read-write memory elements for storing transaction data. 
The system can further include a plurality of sale terminals 
for use by at least some of the vendors to communicate with 

15 the TPF, each sale terminal having a key reader for reading 
the key code from the key device, the TPF having means for 
updating an index based on transactions with one possessing 
the card. Alternatively, the means for correlating the mass 
storage element can include an index of key codes and 

20 authorized mass storage elements associated therewith. When 
the mass storage element has the unique machine-readable 
serial identifier, the terminal drive unit including means 
for signaling the serial identifier to the terminal control 
means, the means for correlating the mass storage element 

25 can also use the work identifier and key code as signaled 
from the drive unit in identifying the vendor. 

The mass storage element can be selected from the 
group consisting of a CD-ROM disk, a CD-I disk, a CD-R disk, 
a CD-V disk, a video CD, a Photo CD, a CD-DA, and a DVD 

30 disk, the terminal drive unit being a compact disk drive. 
DVD disks are in an emerging technology. As used herein, 
DVD disks are those capable of storing at least 3GB of 
recorded information. DVD disks are variously formatted as 
SD, HDCD, and MMCD. The term "compact disk 11 as used herein 

35 refers to each of the above disks as well as future 

variations thereof. When the mass storage element has the 
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unique machine-readable serial identifier, the terminal 
drive unit including means for signaling the serial 
identifier to the terminal control means, the means for 
correlating the mass storage element can include an index of 
5 serial identifiers associated with particular vendors; means 
for comparing means for comparing a particular serial 
identifier as signaled from the terminal drive unit with 
serial identifiers of the index; and means for reading the 
particular one of the vendors from the index in response to 

10 the means for comparing. The serial identifier can be a bar 
code, the means for signaling the serial identifier 
including a bar code reader. The index can include stored 
use fee data associated with the serial identifiers, the 
means for crediting including means for debiting a user 

15 account and crediting a vendor account according to the use 
fee data. 

Preferably the system further includes a plurality 
of sale terminals for use by at least some of the vendors to 
communicate with the TPF, each sale terminal having a serial 
20 ID reader for reading serial identifiers associated with 
mass storage elements and optionally a key reader for 
reading the key code from the device, the TPF having means 
for updating the index based on communications from the 
vendor terminals. 

25 The recorded data of the mass storage element can 

include vendor information, the transaction terminal further 
including means for receiving and storing information 
updates from the TPF using the transaction interface, usage 
of the mass storage element including feeding the one or 

30 more output devices based on a combination of portions of 
the recorded data and the information updates. The usage 
can include selecting and ordering catalog items, the 
updates including catalog updates, the system signaling and 
confirming catalog orders using the transaction interface. 

35 Preferably the transaction terminal further includes a key 
memory for storing authorization data to be compared with 
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user input, the control means inhibiting at least some 
functions of the drive unit unless the user input matches a 
predetermined portion of the authorization data. Preferably 
the transaction terminal includes means for comparing header 
5 information of the mass storage element with predetermined 
data for verifying authenticity of the information, and 
means for inhibiting at least some functions of the terminal 
drive unit unless at least a portion of the header 
information matches the predetermined data. 

10 When the mass storage element is one of a 

multiplicity of elements having the recorded data from 
identical information, each of the elements preferably has a 
unique machine-readable serial identifier, the terminal 
drive unit including means for signaling the serial 

15 identifier to the terminal control means based on use of 
each of the corresponding elements, and the means for 
correlating the mass storage element includes an index of 
serial identifiers authorized for use by particular users; 
and means for determining uses of the elements by comparing 

20 a particular serial identifier as signaled from the terminal 
drive unit with serial identifiers of the index. 

Preferably, the system further provides means for 
determining use of pirated counterparts of the elements, 
including means for storing data corresponding to successive 

25 uses of elements having particular serial identifiers; and 
means for determining incredulous uses based on one or more 
of an elapsed time between successive uses involving the 
same serial identifier, the occurrence of simultaneous uses, 
and geographic distances between locations of successive 

30 uses. The mass storage element can be a CD-R disk, the 
serial identifier being recorded together with other 
recorded data on the mass storage element. 

The system provides protection against 
unauthorized use of specific CDS such as full length movies. 
35 Because the mass storage elements each have the unique 
machine-readable serial identifier, validation of each 
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formatted CD is possible before it can be played, enabling 
the linking of billing through usage for providing continual 
revenue generation* Thus the movie studios are able to 
receive revenue each time a user views the movie. The 
5 machine-readable serial identifier can include authorization 
status information such as whether single or multiple uses 
of the element are authorized. Preferably at least a 
portion of the serial identifier can be altered by the 
terminal drive unit in response to a user f s transaction for 
10 updating the authorization status information. As used 
herein, a user's transaction can include purchase of 
additional authorization as well as actual use of the mass 
storage element. 

In another aspect of the invention, a memory 

15 system incorporates the drive unit, an output interface for 
feeding portions of the recorded data from a main data 
region to one or more output devices, and means for 
signaling the machine-readable serial identifier from a 
region outside of the main data region to an external 

20 device. The drive unit can include a movable data head for 
reading at least a portion of the recorded data as well as 
scanning the serial identifier. The system can include a 
drive unit controller having an operator interface and means 
for accessing authorization data, the controller inhibiting 

25 at least some operations of the drive unit unless the user 
input matches a predetermined portion of the authorization 
data. A single auxiliary data track can contain a plurality 
of auxiliary data bits of the serial identifier. Preferably 
the single auxiliary data track includes at least 200 

30 auxiliary data bits. The serial identifier can include 
approximately 2000 auxiliary data bits. The serial 
identifier can be located within a leadout region of the 
mass storage element. 



35 



The system can be operative for determining use of 
pirated elements, having an index of authorized serial 
identifiers, a comparator between serial identifiers of the 
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index and serial identifiers signaled from the drive unit 
for determining uses of the elements, storage for data 
associated with the uses, and monitoring at least one of 
elapsed time between successive uses with the same 
5 identifier, simultaneous uses, and geographic distances 
between locations of successive uses for determining 
incredulous uses. The serial identifiers can be associated 
in the index with particular users, and the system can make 
use of a key code associated with the drive unit and/or 
10 operator input for enhancing the determination of pirated 
uses. The determination can also be enhanced by comparing 
the work identifier as read from the drive unit with a 
corresponding work identifier of the index. 

In a further aspect of the invention, a method for 
15 reading mass-produced recorded media while preventing 
unauthorized uses thereof, includes the steps of: 

(a) producing recorded copies of particular works 
on respective media elements; 

(b) providing on each element a unique machine- 
20 readable serial identifier; 

(c) providing a device for reading the recorded 
media from the elements in conjunction with authorization 
data, the device also having means for reading the serial 
identifier; 

25 (d) maintaining an index of valid authorization 

codes associated with particular ones of the serial 
identifiers; 

(e) reading the serial identifier in connection 
with attempted reading of a copy; 

30 (f) receiving a proposed authorization code; 

(g) conditionally enabling the authorization data 
to the device based on matching the proposed authorization 
code with a valid authorization code from the index for the 
particular serial identifier of the copy; and 



WO 96/29639 



PCT/US96/04027 



10 

(h) reading the copy as augmented by the 
authorization code. 

Preferably the method meters permitted uses of 
recorded media , including the further steps of: 

(a) forming the index to include authorization 
levels for particular copies; 

(b) debiting the authorization levels based on 
successive uses of the media; 

(c) crediting the authorization levels based on 
transactions involving the particular copies; and 

(d) conditioning the enabling based on the 
authorization levels. 

The method can include the further step of 
maintaining at least a counterpart of the authorization 
level for a particular copy in machine-readable form on the 
copy. Either of the above methods can include the further 
steps of encrypting the works in connection with the step of 
producing the recorded copies, and decrypting the work using 
a portion of the authorization code in connection with the 
step of reading the copy. 

In a further aspect of the invention, a mass 
storage element includes a substrate; a main storage media 
on the substrate for storing a multiplicity of main data 
elements that are readable by data head means from a main 
data region when the data head means moves in a 
predetermined main path relative to the substrate; and an 
auxiliary storage media on the substrate for receiving and 
storing a plurality of auxiliary data elements that are 
readable by auxiliary head means from outside of the main 
data region when the auxiliary head means moves in a 
predetermined auxiliary path relative to the substrate. As 
used herein, the main data elements are mass-stored data of 
the type to be read by a data head of a conventional compact 
disk drive when the data is recorded on a conventional 
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compact disk. Similarly, the main path is movement of the 
type involving rotation of the disk in combination with 
tracking movement of the data head of such compact disk 
drive. Correspondingly , the auxiliary path is of the type 
5 involving rotation of the disk and positioning the auxiliary 
head means for accessing the auxiliary data elements. 

The main data elements can be substantially read- 
only in character. The main storage media can be adapted 
for receiving the main data elements by press-molding. The 
10 main storage media can be adapted for receiving the main 
data elements by selective radiation. The main data 
elements can be optically readable. The substrate and the 
main storage media can be configured as a rotatable compact 
disk. 

15 The auxiliary storage media can be adapted for 

being recorded and read by a single auxiliary head. The 
auxiliary storage media can be a magnetic coating. The 
auxiliary storage media can be adapted for receiving the 
auxiliary data elements by selective radiation. 

20 A mass storage drive incorporating the mass 

storage element can further include means for removably 
supporting the mass storage element; a data head for reading 
the main data elements; auxiliary head means for reading the 
auxiliary data elements; and drive means for moving the 

25 substrate in a predetermined path relative to the data head 
and the auxiliary head means for operation thereof. The 
data head can be an optical head; the auxiliary head means 
can also include a magnetic head that can write at least 
some of the auxiliary data elements; and in any case, the 

30 auxiliary head means can include an optical head. 

The auxiliary head means can be provided by the 
data head being movable in a predetermined auxiliary path 
relative to the substrate for scanning auxiliary data. The 
mass storage drive can include a head circuit having a main 
35 amplifier with an output for signaling main data elements in 
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response to the data head, the circuit having a separate 
auxiliary output for signaling the auxiliary data elements. 
The head circuit can include an auxiliary amplifier for 
driving the auxiliary output. The main amplifier can 
5 include a first frequency response effective for passing the 
main data elements, and the auxiliary amplifier can have a 
second frequency response for passing the auxiliary data 
elements while effectively blocking the main data elements. 
The main amplifier can have a first reference connection for 

10 balancing the main output relative to a data threshold, the 
auxiliary amplifier having a second reference connection 
effective for balancing the auxiliary output relative to a 
serial code threshold of the data head when the data head is 
reading auxiliary data elements. The mass storage element 

15 can be a compact disk, the drive means including means for 
rotating the disk. 

The invention further provides a method for making 
a serialized multiplicity of mass storage elements having 
the mass-recorded data, including the steps of preparing a 

20 master record, recording counterparts of the master record 

onto respective main data regions of a multiplicity of mass- 
storage elements, generating a unique serial number 
associated with each recording master, and writing a serial 
code corresponding to the serial number on each 

25 corresponding mass-storage element outside of the main data 
region, thereby serializing the elements. The method can 
include encrypting the serial number, the respective serial 
codes of the elements corresponding to the encrypted serial 
numbers. The step of writing can include selectively 

3 0 radiating the mass storage elements. The counterparts of 

the master record can be stored within respective main data 
regions of the mass-storage elements , and the step of 
writing serial codes can include selectively altering the 
mass storage elements outside of the respective main data 

35 regions. Each mass storage element can have a control 
region outside of the main data region, and the step of 
altering the mass storage elements can include selectively 
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altering the control region of each one. The step of 
altering is preferably performed in sufficiently spaced 
relation to the main data region for preserving 
functionality of the control region adjacent the main data 
5 region. Further or alternatively, the step of altering 

includes further steps of altering separate sub-regions of 
the control region corresponding to respective portions of 
the serial code, and spacing the sub-regions sufficiently 
apart within the control region for preserving functionality 

10 of the control region. The mass-storage elements can be 
compact disks, the control regions thereof being leadout 
regions having characteristic data recorded thereon, and the 
step of altering can further include rotating each of the 
disks, modulating a laser etcher with counterparts of the 

15 serial codes, and directing radiation from the laser etcher 
within the leadout region of each of the disks. 
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DRAWINGS 

These and other features, aspects, and advantages 
of the present invention will become better understood with 
reference to the following description, appended claims, and 
accompanying drawings, where: 

Figure 1 is a pictorial block diagram of a 
multimedia system for personalized data access according to 
the present invention; 

Figure 1A is a partial plan view of a disk drive 
unit using a serialized mass storage element for use in the 
system of Fig. 1; 

Figure 2 is a main program flow diagram of the 
system of Fig. 1; 

Figure 3 is a program flow diagram for 
initializing the system of Fig. 1; 

Figure 4 is a program flow diagram for playing 
movies on the system of Fig. 1? 

Figure 5 is program flow diagram for a billing 
portion of the program of Fig. 4; 

Figure 6 is a plan view showing a remote control 
unit of the system of Fig. 1; 

Figure 7 is a functional block diagram showing an 
alternative configuration of a portion of the system of Fig. 
1; 

Figure 8 is a block diagram of a processor section 
of the system portion of Fig. 7; 

Figure 9 is a block diagram of a CD drive section 
of the system portion of Fig. 7; 

Figure 10 is a block diagram of a video section 
of the system portion of Fig. 7; 
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Figure 11 is a pictorial schematic diagram showing 
a method and apparatus for producing a preferred form of the 
mass storage element of Fig. 1A; 

Figure 12 is a pictorial schematic diagram showing 
an alternative configuration of the disk drive unit of Fig. 
1A, configured for use with the mass storage element of Fig. 
11; 

Figure 13 is a graph showing reflectivity levels 
of serial coding as applied in an adjunct data region of the 
mass storage element of Fig. 1; 

Figure 14 is a schematic diagram showing an 
alternative configuration of a portion of the disk drive 
unit of Fig. 12; and 

Figure 15 is a detail plan view showing further 
details of the mass storage element of Fig. 11. 
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DESCRIPTION 

The present invention is directed to a multimedia 
transaction system that is particularly effective and 
versatile, inexpensive, and easy to use. With reference to 
5 Figs. 1-6 of the drawings, a multimedia system 10 includes a 
transaction terminal 12 having a television monitor 14 which 
can be a conventional TV receiver, a pair of speakers 16, 
and a transaction unit 18. The transaction unit 18 includes 
a terminal drive unit 2 0 for accessing a selected mass 

10 storage element 22 which can be a high-density optical disk 
(CD) , the drive unit 20 having conventional means (not 
shown) for reading information recorded on the element 22. 
CDS are particularly advantageous as mass media for 
distribution to a multiplicity of users in that they can be 

15 mass-produced by pressing from a master recording. The 
direct copying such as by pressing initially renders the 
copies indistinguishable from each other. The present 
invention provides for tracking individual copies of such 
mass-produced works for permitting a variety of initial and 

20 subsequent transactions involving the works. 

In an exemplary configuration of the system 10 
shown in Fig. 1, the terminal drive unit 20 includes means 
for reading a unique serial number or code 24 that is formed 
in or on the mass storage element 22, the means being 
designated bar code reader 23. It will be understood that 
the bar code reader 23 can be provided as an extension of 
the tracking range of a conventional playback head of the 
drive unit 2 0 as an alternative to having a separate 
stationary (low resolution) head. Further, many 
conventional CDS have an inside track carrying a bar code 
that is mass-produced together with the mass-copied data, 
the mass-produced bar code identifying the particular work 
that is reproduced in the CD. The conventional bar code is 
used in existing inventory and stocking schemes, and is not 
intended to be read by ordinary CD players. As shown in 



25 



30 



35 



WO 96/29639 



PCT/US96/04027 



17 

Fig* 1A, the serial code 24 is located in the annular space 
of the CD 22 that can also contain the conventional bar 
code. One method for producing the serial code 24 is by 
laser-etching a reflective coating of the CD 22 that also 
5 contains the mass-produced data (and can also contain the 
mass-produced bar code) . The serial code 24 is unique to 
each copy of the CD 22, and preferably includes further 
identification of the particular work, so that the work and 
the particular copy thereof are discernable by operation of 

10 the bar code reader 23. It will be understood that other 
methods of producing the serial code 24 are possible, 
including by application of an adhesive label, and by 
directly molding or pressing bar code elements into the CD 
22 using movable die elements that are electrically driven 

15 under computer control. Also, the serial code 24 can be 

recorded together with other mass-stored data when the mass 
storage element 22 is a CD-R (recordable) disk. Further, 
other locations for the serial code 24 are possible, such as 
radially inside or outside of the mass-produced bar code. 

20 Moreover, it is preferred that at least a portion of the 

serial code 24 be alterable for recording status information 
as further described below. Accordingly, and with 
particular reference to Fig. 1A, a portion of the serial 
code 24, designated read/write serial code 24 1 , is formed as 

25 a magnetic stripe using means well known in the credit card 
industry. Correspondingly, an important and preferred 
configuration of the system 10 includes the terminal drive 
unit 20 having the bar code reader 23 including a magnetic 
read/write head 232, and a main read head 234. The drive 

30 unit 20 is adapted for removably receiving the element 22, 
being configured as a rotatable compact disk having a 
substantially rigid substrate 222, on a disk drive 236, the 
main read head 234 being movable inwardly and outwardly 
relative to the disk drive 236 for accessing tracks of main 

35 data elements that are pre-stored in a conventional manner 
in a main storage media 224 on the substrate 222. The 
read/write serial code 24 1 is formed in an auxiliary storage 
media 226 of the element 22, the auxiliary storage media 226 
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being located for access by the read/write head 232. 
Magnetic material for the auxiliary storage media 226 to 
receive the serial code portion 24 1 can be applied as part 
of a process for labeling the CD 22. In implementations 
5 wherein only a portion of the serial code 24 is alterable, 
it is contemplated that the portion 24 • be radially offset 
from the remainder of the code 24 as shown in Fig. 1A. The 
content of the serial code 24, including serial number, 
status and accounting information can be from approximately 
10 200 bits of information up to approximately 2 Kb. 

The transaction unit 18 also includes a key 
interface 26, a transaction interface 28, and transaction 
controller 3 0 for operating the terminal drive unit 20 in 
response to operator input and signals received from the key 

15 interface 26 and the transaction interface 28. The 

controller 30 includes an input interface 32 that can be 
wired to a joystick unit 34 for playing video games and the 
like, the input interface 32 being otherwise responsive to a 
wireless remote controller 36 that is shown in greater 

20 detail in Fig. 6, the remote controller 36 having a numeric 
keypad, transport controls, a mouse equivalent and possibly, 
a few special purpose keys. 

An important feature of the present invention is 
local memory for managing authorized access to the mass 

25 storage elements 22. In one embodiment, the system 10 

includes a key memory device 38 that is insertable into the 
key interface 26. The device 38, which can be slightly 
larger than a credit card, has machine-readable data stored 
therein, including a personal identification number (PIN) 

3 0 and a key code that is interrogated as further described 
below in connection with Figs. 2 and 4 for permitting 
authorized access to restricted data portions of the mass 
storage element 22. The restricted data is preferably 
encrypted by means such as utilized by DES and described in 

35 FIPS Publication No. 46 (NTIS) , incorporated herein by this 
reference. As also further described below, the key device 
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38 preferably has read-write memory for storage and 
retrieval of user data and transaction data for enhanced 
security and flexibility in managing transactions by a user 
of the device 38. 

5 The terminal 12 is contemplated to be one of a 

multiplicity of such terminals 12 as indicated by dashed 
lines and the designation 12 1 in Fig. 1, the system 10 also 
including at least one transaction processing facility (TPF) 
40 that intermittently communicates with the terminals 12 

10 over a suitable terminal network 42 using a terminal 

interface 44. The TPF 40 also includes a database processor 
46 for controlling and monitoring the terminal network 42, 
the processor 46 being also connected to a mass database 
memory or index 48, a service terminal 50 and, optionally, a 

15 provider interface 52 for communicating with a plurality of 
vendor terminals 54 over a counterpart of the terminal 
network, designated provider network 42 1 . 

Each vendor terminal 54 can include a vendor 
interface 56 and a counterpart of the bar code reader, 

20 designated 58. The bar code reader 58 reads a unique serial 
number (which can contain a code corresponding to the title 
of the work) from each mass storage element 22 for tracking 
individual copies of each work. The bar code reader 58 
corresponds to the bar code reader 23 of the transaction 

25 terminal 18, except that the mass-recorded information of 
the element 22 need not be readable by the vendor terminal 
54 when the reader 58 is active. The bar code reader 58 can 
be implemented for reading labels on cartons containing 
multiple copies of the mass storage element 22, the labels 

3 0 identifying the work and a range of serial numbers on the 
elements 22 therein. As shown in Fig. 1, an exemplary 
configuration of the terminal 54 also includes a key 
interface 26 1 that corresponds to the key interface 26 of 
the transaction unit 18, but need only to read the PIN for 

35 identifying the user, for permitting a direct correlation of 
a particular user with the mass storage element 22 in a 
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transaction involving the element 22. The correlation can 
be between the user and a particular copy of the element 22 
when the code reader 58 reads the serial code 24 or 
counterpart thereof the element 22. When the code reader 58 
5 reads a range of serial numbers, the user is correlated with 
a group of the elements 22 that are handled by the 
particular vendor. It will be understood that the monitor 
14 can include the speakers 16 or, alternatively, a monaural 
speaker. 

10 Transaction Terminal Set-Up 

In an exemplary set-up protocol for the system 10 
of Fig. 1, the user receives the transaction unit 18, the 
remote controller 36, the key memory device 38, a "start up" 
counterpart of the mass storage element or startup CD 22*, 

15 and a printed installation manual. (In the alternative 

configuration of Figs. 7-10 , discussed below, the key memory 
device 38 is omitted, functions thereof being provided 
internal to a counterpart of the transaction controller 30.) 
The start up CD 22 1 and installation manual guide the 

20 (untrained) user through an installation process using the 

remote controller 36, no keyboard, mouse, or other computer- 
like device being required. 

The installation manual explains how to make the 
preliminary connections to the transaction unit 18 in order 

25 to view the start up CD 22 1 . Also, because it is necessary 
to turn the transaction unit 18 and the TV monitor 14 off 
when making the final connections, the manual serves as a 
handy reference where the installation setup shown on the 
startup CD 22 can be copied. The startup CD 22 1 is normally 

30 retained by the user to serve as a troubleshooting guide and 
operational reference after the installation has been 
successfully completed. 



35 



Information (e.g. name, address, credit card 
number) required to access the services provided by the 
system 10 are provided to a trained customer service 
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representative by means of a one-time telephone call placed 
by the user, the information being entered through the 
database processor 46 of the TPF 40 into the index 48 by the 
service terminal 50. As further described below, a data 
5 call is established between the transaction unit 18 and the 
TPF 40 over the network 42 for loading all of this 
information into the key memory device 38 (or other memory) 
using the key interface 26. This call is initiated by the 
transaction unit 18 or the TPF 40 depending on the 

10 particular system configuration. The transaction unit 18 

then indicates (via the TV monitor 14) that it has received 
the initialization information and the user is ready to 
begin any of several applications. Trained installers can 
be made available for consultation by telephone once 

15 transaction unit 18 is connected to the TV monitor 14. 

The transaction unit 18 plugs into an ordinary 120 
volt AC outlet, a modular telephone jack, the antenna input 
of the TV monitor 14, and any other related home 
entertainment device, such as a VCR. The user connects the 
20 transaction unit 18 to power and television video, and also 
installs batteries into the remote controller 36. 

To use the startup CD 22 1 , the user turns on the 
transaction unit 18 and TV monitor 14 and places the startup 
CD into the terminal drive unit 20. The startup procedures 

25 on the CD utilize voice, graphical diagrams, and full motion 
video to demonstrate the installation in detail. The TV 
monitor 14 then displays a welcome message along with an 
overview of the operating instructions. The user then 
chooses installation options from the configuration guide on 

30 the CD and a parallel configuration guide in the manual. 
The user is instructed to copy the correct installation 
connections into the startup manual's installation guide, 
including hookups to the telephone, TV monitor 14, power, 
VCR, cable box, etc. Then, with power off, the user hooks 

35 up all of the connections in accordance with the 

installation guide and turns on the transaction unit 18. As 
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described below, the transaction unit 18 checks that the 
installation is correct, and if not, displays an appropriate 
error message to the user via the TV monitor 14 . 

On the home telephone, the user calls the customer 
5 service operator on the 1-800 number provided to give the 
startup background information. A form is displayed on the 
TV monitor 14 and in the startup manual. The necessary 
background information includes names and PINs (personal 
identification numbers) , telephone number, credit cards with 

10 expiration dates, address, credit/ advance amounts to be 
stored with maximum, minimum, and thresholds, mailing 
addresses for purchases, and default mailing method. A data 
call is then established over the network 42 as described 
above, for sending the necessary information from the TPF 40 

15 to the transaction unit 18. Communications between the TPF 
4 0 and the transaction unit 18 are secured by appropriate 
data encryption. The use of public and private keys for 
encryption/decryption is contemplated in the present 
invention. Public/private key protocol is available under 

20 license from RSA Data Security Corp. of Redwood City, CA, 
being described, for example, in U.S. Patent No. 4,405,829 
to Rivest et al., which is incorporated herein by this 
reference. Information downloaded from the TPF 4 0 to the 
transaction unit 18 is displayed onto the TV monitor 14 for 

25 confirmation by the user. If any information is incorrect, 
the user can then correct it on-line or place a follow up 
call to the 1-800 operator. When this screen is filled in 
and correct, the transaction unit is ready to play. 

With particular reference to Fig. 2, the 
3 0 transaction controller 30 is firmware-programmed in a main 

routine 100 for appropriate operations with the mass storage 
element (CD) 22 in one of several formats. Following the 
one-time initialization that is described below in 
connection with Fig. 3, control is passed to a normal start 
35 step 102 and upon loading of the CD 22, the terminal drive 

unit 20 is activated in an initial play step 104 for reading 
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header information from the CD 22, that information being 
interrogated in a format test sequence 106 for branching to 
an appropriate play routine 108, which can be a game routine 
108A, a movie routine 108B, a catalog routine 108C, or an 
5 open routine 108D. When play is complete or otherwise 

terminated as described below, control is passed to an eject 
step 110, then returned to the normal start step 102. 

The main routine 100 further includes a set-up 
test step 112 that is automatically entered upon power up 

10 for determining whether the transaction unit 18 has been 

initialized. If so, control is passed to the normal start 
step 102; otherwise, a set-up routine 114 is performed as 
shown in Fig. 3. In the set-up routine 114, a test startup 
CD step 116 blocks further processing until the startup CD 

15 22 1 that is formatted for initialization is present. Next, 
a message prompting insertion of the key memory device 38 is 
sent to the TV monitor 14 in a key prompt step 118, followed 
by a test key step 120 for determining the presence of and 
valid communication with the key memory device 38. (As 

20 indicated above, the key memory device 38 is omitted in the 
alternative configuration of Figs. 7-10, discussed below.) 
If the valid communication is established within a 
predetermined time limit, control is passed to a test TPF 
call step 122; otherwise, an error message step 124 

25 appropriately signals the TV monitor 14, with control 
returning to the test startup CD step 116. 

In the test TPF call step 122, the set up routine 
114 waits for completion of a data call with the TPF 40 as 
described above, the PIN and other personal data being 

30 transmitted over the transaction network 42 during the call. 
The received data is stored in flash memory (of the key 
memory device 38 or elsewhere in the transaction controller 
30) in a user data update step 126, the data also being 
displayed on the TV monitor 14 in a user data display step 

35 128. The received data also includes a date by which a 

subsequent TPF telephone contact is expected. Next, a test 
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data step 130 is entered for the user to verify whether the 
displayed data is consistent with that given verbally to 
personnel operating the TPF 40. If not, a user input step 
132 is entered for permitting user corrections to be made, 
5 after which the test data step 130 is repeated. Once the 

user is satisfied with the entered personal data, control is 
passed to a test changes step 134 for invoking a transmit 
data step 136 in case changes were made, the set-up routine 
114 concluding in an eject CD step 138. In the transmit 
10 data step 136, the edited personnel data is transmitted over 
the transaction network 42 to the TPF 40 where it is stored 
for further use as described below. 

Normal Operations 

In normal operations, a session begins when the 
15 user inserts a selected CD or mass storage element 22 into 
the terminal drive unit 20 of the transaction unit 18. 
Operations are displayed on the TV monitor 14 in an 
intuitive graphical user interface while the user makes 
selections with the remote controller 36 from the choices 
20 displayed. Available operations are determined by the type 
of mass storage element 22 inserted into the terminal drive 
unit 20. At this point, if the transaction unit 18 has 
received a text message from the TPF 40, the user will be 
informed, for example, that certain catalogs have been 
25 updated or that certain promotions are in effect. The user 
is prompted to make selections, using the remote controller 
36 to select items on the TV monitor 14, to progress through 
the session. 

Preferably messages, commands, or updated 
30 information transmitted from the TPF 40 are accompanied by a 
new date by which a subsequent TPF 40 contact is expected. 
If there has been no call prior to this date, then the 
transaction unit 18 is to automatically initiate a call for 
updated instructions from the TPF 40. If the transaction 
35 unit 18 is unable to contact the TPF 40, then the user is 
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advised in an error message -to check the -telephone line. 
This error message is repeated each time the unit 18 has a 
CD 22 inserted until the call to the TPF 40 is completed. 
After a set number of days without contact with the TPF 40, 
5 then the firmware in the transaction unit 18 will cause the 
unit 18 to disable its own operation. 

At appropriate points in each session, the 
transaction unit 18 prompts the user to insert the key 
memory device 38 into the transaction unit 18, if it is not 

10 already in place, and enter a counterpart of the personal 

identification number (PIN) using the remote controller 36, 
as further described below. Each person in a household may 
have his own PIN number stored on the key memory device 38 
to uniquely identify each authorized user to the transaction 

15 unit 18. Credit information, restrictions on use (such as 
viewing up to PG rated movies only) , catalog ordering 
information, etc., are associated with each PIN number, this 
information being duplicated at the TPF 40. Although most 
entertainment mass storage elements 22 are assigned a "pay 

20 per play" or "pay for a designated period of time" 

arrangement, as further described below, it is possible to 
"free preview" an initial portion of the element 22 that is 
not required to be encrypted. Also, all portions of a 
catalog are normally accessible without entering a PIN as 

25 described below, unless information in the catalog is 
restricted, such as information that would not be 
appropriate for children. 

The system 10 is configured to minimize use of the 
user's home telephone or other network channel, both in 

30 terms of the number and the duration of calls. Other than 
the cost of a local telephone call, all related voice and 
data telephone call charges of the system are contemplated 
to be free to the user. Still, in view of the computer or 
fax modems typically in home offices, or when teenagers are 

35 present, there is competition for use of a single home 

telephone line. Therefore, if the home telephone is in use 



WO 96/29639 



PCT/US96/04027 



when the transaction unit 18 attempts to call the TPF 40, 
the transaction unit 18 can be programmed to retry the 
telephone call at a later time until successful. 
Alternatively, a data-over-voice protocol is contemplated. 

5 catalog Shopping 

For catalog shopping, the user receives catalog 
mass storage elements 22 in the mail or by other appropriate 
channels. After inserting the catalog CD element 22 into 
the terminal drive unit 20, the transaction controller 30 

10 causes header information to be read from the CD 22 in the 
format test sequence 106. In the case of catalogs, the 
sequence 106 checks for a digital signature to determine 
that the catalog is authorized for use on the system before 
entering the catalog routine 108C as described above. The 

15 catalog routine 108C enables the user to browse or search 
for specific items, normally without entering a PIN as 
described above. Only when the user actually orders an item 
is the PIN necessary. In the implementation of Fig. 1, the 
user can elect to view the mass storage elements 22 at a 

20 neighbor's home or a second house having a counterpart of 
the transaction unit 18, and can place orders provided the 
user's key memory device 38 is present. 

The presentation of catalog items by the system 10 
is greatly enhanced by use of stereo sound, graphics, text, 

25 and full-motion video combined in easy to use multimedia 

format. At any time while browsing through the catalog, the 
user may select single or multiple items for purchase. The 
transaction unit 18 automatically sends the order to the 
catalog retailer's order entry computer via the TPF 40. 

30 Using the transaction unit 18, the user quickly receives 

confirmation of availability and total price of the order. 
Filling out the order on the TV monitor 14 requires only 
selecting the items desired, as all necessary information 
pertaining to the user is already stored on the user's key 

35 memory device 38 (or other memory of the transaction 
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controller 30) • After the system 10 completes the order 
form and sends it to the retailer's computer, the retailer's 
normal fulfillment procedures are invoked, and the purchased 
items are mailed directly from the catalog retailer to the 
5 user. Any problems or returns are dealt with by the 

retailer and any reversals of charges that may be required 
are accomplished automatically and recorded by the database 
processor 46 of the TPF 40. 

Alternatively, the user can elect to use the 
10 telephone for placing an order with the catalog retailer's 

operator. Confirmation of the order and the purchase orders 
are mailed directly from the catalog retailer to the user. 
Any problems or returns are dealt with by the retailer, 
including reversal of charges. 

15 The transaction unit 18 is intended never to be 

turned off, going into a standby mode when not being used in 
order to receive catalog updates and promotional messages. 
Thus catalog retailers are also able to keep pricing current 
through communications to the transaction unit 18, even 

20 after the catalog has been published. In addition, close 
coordination with catalog retailers, combined with the two 
way communications capability of the system 10, enables both 
the user and the retailer to benefit from the availability 
of special sale prices on a daily basis. 

25 Movies 

A major feature of the system 10 is the capability 
of playing full length feature movies on a single mass 
storage element or CD 22. These movies are distributed in a 
variety of ways, such as from video stores, vending 
30 machines, or through the mail. Because of the minimal 

manufacturing cost of CDs, they do not need to be returned 
to the video store or any other distribution center. Thus 
the user can maintain a movie library at home for personal 
use or to give or lend to others. 
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In an exemplary transaction, the user picks up a 
movie CD at the local video store and pays a small usage 
charge that covers two 24 hour viewing periods. Once the 
mass storage element 22 in the form of a movie CD 22 is 
5 loaded into the terminal drive unit 20, control is passed to 
the movie routine 108B as described above. With particular 
reference to Figs. 3 and 4, the movie routine 108B first 
obtains header information including a billing rate and 
expiration date from the CD 22 in a header step 140. Next, 

10 the expiration date is compared with an internal calendar in 
a test expiration step 142 for determining possible 
expiration of authorized use, in which case an appropriate 
message is displayed in an expired message step 144, 
followed by termination of the movie routine 108B using a 

15 counterpart of the eject CD step 138. 

If the CD 22 has not expired, control passes to 
counterparts of the test key step 120 and the error message 
step 122 (until the key memory device 38 is in place in the 
configuration of Fig. 1) , at which point the user is 

20 required to enter a valid PIN in an enter PIN step 146. If 
the entered PIN is rejected in a test PIN step 147, control 
is returned to the enter PIN step 146; otherwise, the drive 
unit 20 is activated in a play open step 148 for playing 
selected information from the CD 22, the selected 

25 information being typically a free preview of the main 
contents of the CD 22. 

Following the play open step 148, and while the 
unencrypted information is being played from the CD 22, 
control is passed to a billing routine 150. As shown Fig. 

30 5, the billing routine 150 first determines whether the CD 

22 is owned for unlimited play in a test unlimited step 152. 
In the embodiment of the system 10 shown in Fig. 1, serial 
numbers and ownership status of each CD 22 can be stored in 
memory of the key memory device 38. Alternatively, such 

35 information can be stored in other memory of the transaction 
unit 18. The same information is also stored in the index 
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48 of the TPF 40. However, a call over the transaction 
network 42 for accessing same is initiated only in the event 
of a malfunction or other extraordinary circumstance in 
order to avoid unnecessary delay and usage of the network 
5 42. If there is unlimited ownership, control is passed to 
an update memory step 154 wherein flash memory of the key 
memory device 38 or other non-volatile memory of the 
transaction unit 18 is updated if necessary, after which 
authorization for playing the main contents is returned to 

10 the movie routine 108B via an authorized exit step 156. It 
will be understood that the update memory step 154 can 
include overwriting the read/write serial code 24" with the 
current authorization status of the CD 22. Thus further 
testing of the status of the CD 22 can be implemented 

15 locally without placing a telephone call to the TPF 40. In 
this implementation, decryption key information for the CD 
22 is pre-loaded into the transaction terminal 18 during 
previous telephonic communication. Thus the number of 
communications between the transaction terminal 18 and the 

20 TPF 40 is significantly reduced, with corresponding cost 
savings . 

In case unlimited play was not previously 
authorized, control is passed from the test unlimited step 
152 to a test start step 158 for determining whether a first 

25 timed billing period had previously been initiated. If not, 
initiation of the first period is done in a start first step 
160 by retrieving the current date and time, with control 
being passed to the update memory step 154 for storing the 
current date and time in an appropriate memory location. If 

30 the first period had been initiated, expiration thereof is 
determined in a test first period step 162 wherein the 
previously stored date and time, plus a predetermined 
duration of the first period (24 hours, for example) , is 
compared with the current date and time. If the first 

35 period remains in effect, control is passed to the update 

memory step 154 (which can be alternatively bypassed here) ; 
otherwise, a counterpart of the test start step, designated 
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158 1 , is performed for determining whether a second timed 
billing period had been started. If not, a counterpart of 
the start first step 160, designated start second step 164, 
is done, followed by the update memory step 154 as described 
5 above; otherwise, a test second period step 166 for 

determining whether the second period has not expired, in 
which case control is passed to the update memory step 154 
as described above; otherwise, an option for unlimited play 
is presented on the TV monitor 14 in an offer unlimited step 

10 168, after which a test accepted step 170 is executed for 
determining acceptance of the offer by the user. Upon 
acceptance, control is passed to the update memory step 154 
for storing the unlimited play election; otherwise, an 
alternative option is presented in an offer single view step 

15 172, which is followed by a counterpart of the test accepted 
step 170. Upon acceptance, control is returned to the start 
second step 164, followed by the update memory step 154 for 
storage of acceptance and initiation of the "second 11 billing 
period. If the single view offer is refused, an 

20 unauthorized exit 174 is taken for reflecting same in 
returning to the movie routine 108B. 

Following the billing routine 150, control is 
passed in the movie routine 108B to a test paid step 176 for 
determining whether use beyond that previously paid for was 

25 requested. If not, the required decryption key is requested 
from the key memory device 38 in a get key step 178, and a 
test key step 180 is executed for determining successful 
access to the key. If the key was available from the device 
38 (or elsewhere in the transaction unit 18) , control is 

30 passed to a decrypting play step 182 for continuing play of 
the CD 22 beyond the initial unencrypted portion. Upon 
completed play of the movie, program control returns to the 
eject step 110 of the main routine 100. If unavailable in 
the transaction terminal 18, the decryption key is obtained 

35 by telephone using the transaction network 42 in a get TPF 
key step 184, followed by a key store step 186 in which the 
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key is stored in appropriate non-volatile memory (of the key 
memory device 38) . 

From the test paid step 176, a payment request 
step 188 is performed wherein an appropriate message is sent 
5 to the TV monitor 14 for requesting payment authorization . 

A test authorization step 190 returns control to the billing 
routine 150 if authorized; otherwise, control is passed to 
the main routine 100 for ejection without further play of 
the CD 22. 



10 As described above, the first viewing period 

starts from the time of first play, not when the CD 22 
leaves the store. The second viewing period may start at 
any time thereafter. This approach provides the consumer 
with a more convenient and cost-effective means for 

15 obtaining movies than by traditional video store time rental 
services. If the user subsequently decides to acquire 
additional 24 hour viewing periods, no further action on his 
part is required. He merely plays the CD 22 on the 
transaction unit 18, and an incremental usage fee will be 

20 automatically charged to his account. Also, the user may 
instead decide to purchase the movie for unlimited play, 
which transaction can also be implemented from the 
convenience of home on the transaction unit 18. 



Other Uses 

25 The system 10 is also designed for the user to 

play video games and other multimedia entertainment CDs 22 
using the joy stick unit 34 to play games or navigate 
through multimedia applications. Existing multimedia 
personal computer CDs can be supported by the system 10, the 

3 0 publisher being able to change the price/use combination at 
the TPF 40. 

The terminal drive unit 20 of the system 10 also 
has the capability to play standard audio formatted CDs, 
just like a standard audio CD player, the transaction unit 
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18 having stereo outputs for connecting to the user's 
amplifier or surround sound system for providing high 
fidelity sound. Track selection and other functions can be 
selected by the remote controller 36. The transaction unit 
5 18 can be configured to further enable the user to display 
images on a Kodak* Photo CD, the images being viewed using 
the remote controller 36 with Photo CD Access software* 

The transaction unit 18 is like a blend of an 
audio CD player, a multimedia personal computer and a laser 

10 disk player, all housed in a single box about the size of a 
consumer VHS player. Accordingly, the transaction unit 18 
provides a subset of operations and connections found on 
each of these entertainment systems, in addition to the key 
interface 26 (and/or flash memory of the transaction 

15 controller 30), the transaction interface 28, and the 
transaction controller 30. 

As described above, correlation of the mass 
storage element 22 with transactions involving same is 
achieved by operation of the vendor terminal 54 , wherein the 

20 particular serial numbers of the CDs 22 that are sold by 
that vendor are read by the bar code reader 58 and 
transmitted to the index 48 of the TPF 40. At the same time 
(or at a different time) other data unique to the user can 
also be transmitted from the vendor terminal 54 to the index 

25 48 for correlating vendor sale of the element 22. Also, the 
transaction terminal 18 provides correlation of the element 
22 with user play transactions by operation of the bar code 
reader 23 in conjunction with the key memory device 38, the 
key memory device 38 (or other memory of the terminal 18) 

3 0 being loaded with user and serial number authorization data 
as provided from the TPF 40. 

Another correlation capability is achieved by 
tracking blocks or ranges of serial numbers on mass storage 
elements 22 that are delivered to particular vendors, that 
35 information being stored in the index 48 of the TPF 40. 

When the user of the terminal 18 attempts to play the mass 
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storage element: or CD 22, the serial number is read by the 
bar code reader 23, the number being correlatable with the 
corresponding number (or range containing the number) in the 
index 48 for associating the element 22 with the particular 
5 vendor that sold it, thereby enabling payments for plays of 
the element 22 beyond what was initially sold to be made to 
the vendor. In this example, the correlation, which is also 
based on the serial number of the CD 22, is first made using 
communications with the TPF 40 over the terminal network 42, 
10 with appropriate authorization and decryption data being 
stored in the key memory device 38, subsequent plays in 
accordance with the authorization being monitored locally by 
the transaction terminal 18. 

In another example, the title and other data 
15 identifying the particular work sold, the type of sale 
(limited or unlimited play) , and the purchaser, is 
transmitted from the vendor terminal 54 to the TPF 40 over 
the provider network 42 1 for storage in the index 48. 
Correlation is accomplished at the transaction terminal 12 
20 as in the previous example, based on the title and other 

identifying data (but not a unique serial number) under the 
presumption that only one copy of a particular work would be 
purchased by a single user, or the copy in use is the one 
most recently purchased by the user. Thus it is not 
25 required to use either of the bar code readers 23 or 58. In 
this example, the title and other data needed for 
identifying a particular work is stored in the index 48 
together with data identifying the vendor and the purchaser 
(user) . 

3 0 Alternative Configuration 

With further reference to Figs. 7-10, an 
alternative configuration of the transaction unit 18 has a 
counterpart of the key memory device 38 incorporated 
integrally with a counterpart of the transaction controller, 
35 designated 30 f . Figure 7 shows the controller 30 1 including 
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a computer processor 60, system memory including a ROM 62, 
flash RAH 64 and a DRAM 66 interfaced with a system bus 68, 
the DRAM 66 also being directly connected to the processor 
60. The processor 60, which is shown in greater detail in 
5 Fig. 8, has internal thereto a first parallel port 60A 

connected to the input interface 32, and a second parallel 
port 60B connected to a counterpart of the key interface 26, 
designated expansion interface 26", that provides expansion 
and local data exchange capabilities as described below. 

10 The processor 60 also includes a timer/serial port 60C that 
is connected to the transaction interface 28, and an IDE 
interface 60D that is connected to the terminal drive unit 
20. Further, the processor 60 includes a high-speed 
interface 60E that feeds a secure processing unit (SPU) 70 

15 that provides other functions of the key memory device 38 as 
described below, and a video block 72 that is shown in Fig. 
10 and described below, the SPU 70 and the video block 72 
also being connected to the system bus 68 as shown in Fig. 
7. Moreover, the processor 60 includes a DRAM controller 

20 60F and an interrupt controller 60G that is connected to 
interrupt lines of the system bus 68, the interrupt lines 
also being connected to the input interface 32 for 
responding to operator intervention. The DRAM controller 
feeds address and control signals to the DRAM 66, memory 

25 data being bidirectional ly communicated over the system bus 
68. A device suitable for use as the computer processor 60 
is available as a MC68EC000 "flex core" CPU from Motorola of 
Phoenix, AZ. The ROM 62 can have a conventional 512K x 16 
bit configuration, the flash RAM 64 can be implemented as 2 

30 Mbytes of serial disk-drive storage, and the DRAM 66 can be 
in a conventional 256Kx 16 configuration having 80 nS access 
time. 

The secure processing unit or SPU 70 is 
responsible for all encryption, decryption, transaction, and 
35 security requirements of the transaction unit 18. An SRAM 
74 is interfaced with the SPU 72 separately from the system 
bus 68 for maintaining the contents thereof secure from 
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unauthorized access. For example, the expansion interface 
26 M is firmware programmed for access to the terminal drive 
unit, the transaction interface 28, and the SPU 70, but not 
restricted data that is stored in the SRAM 74. The SRAM 74 
5 can be implemented as a conventional 32Kx8 CMOS device. 

The SPU 70 contains a limited amount of on-chip 
memory for data and transaction storage. Additional 
information can be encrypted and stored in the main system 
memory (the flash ram 64 and the DRAM 66). The SPU 70 is 
10 intended to provide a sustained decryption rate of 1.2 Hb/S. 
The SPU 70 can be a bus master device, with conventional bus 
arbitration logic (not shown) being implemented between the 
SPU 70 and the processor 60. 

Licensed public-key cryptographic algorithms can 

15 be used to manage key distribution and to provide digital 

signature capability to the transaction unit 18. The SPU 70 
contains the secret keys of secret-public key pairs that are 
unique to each SPU 70 of the multimedia system 10. As 
indicated above, the secret-public key protocol, including 

20 encryption and decryption as disclosed in U.S. Patent No. 

4,405,829, is included under license from RSA Data Security 
Corp. The SPU 70 generates digital signatures when 
establishing communication with the TPF 40. The digital 
signatures are verified by the SPU 70 before certain 

25 restricted data such as catalogs and instructions from the 

TPF 40 are permitted to be processed by the transaction unit 
18. The SPU 70 is contemplated to incorporate other 
physical and functional features that render unauthorized 
interrogation and/or reverse engineering either impossible 

30 or impractical. Such features can include isolation of 

internal memory address locations from external connections 
until appropriate access codes are applied, and 
electromagnetic shielding for blocking x-ray analysis, for 
example. A device suitable for use as the SPU 70 is being 

35 made available based on internal reference No. SPU2.0/PV3, 
from National Semiconductor Corp. of Sunnyvale, CA. 
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Figure 9 shows a preferred implementation of the 
terminal drive unit 20, implemented in a conventional manner 
for playing full motion video (movies) , except that quad 
density playback is contemplated. It will be understood 
5 that the total capacity of each CD 22 is proportional to the 
recording density and to the effective area of the recorded 
medium. Thus there is a trade-off between the size and the 
density of the CD 22 for obtaining a desired playing time 
using a given recording format. Also shown in Fig. 9 is a 
10 separate audio output for use in playing conventional audio 
disks, which output can directly drive an audio decoder that 
is described below in connection with Fig. 10. 

As shown in Fig. 10 , an exemplary implementation 
of the video block 72 includes a full motion decompression 

15 processor 76 having locally interfaced memory including a 

ROM 78, an SRAM 80, and a DRAM 82. The decoder 76 feeds an 
digital-audio converter 84 and a NTSC encoder 86, the 
converter 84 and encoder 86 feeding respective analog audio 
and video signals to the TV monitor 14. The ROM 78 can have 

20 64 Kb capacity, the SRAM 80 can be organized as 4 x 32 Kb with 
25 nS access time, and the DRAM 82 can be organized as 
4 x 256K x 16 bits having 70 nS access time. A device suitable 
for use as the decompression processor 76 is available as 
IIT 3201 MPP, available from Integrated Information 

25 Technology, Inc. of Santa Clara, CA. Alternatively, the 

DRAM 82 can incorporate the functions of the ROM 78 and the 
SRAM 80, being operated in fast page mode with 4 5ns access 
time. Another device suitable for use as the decompression 
processor 76 is available as STI3500A, available from SGS- 

30 Thomson Microelectronics Inc. of Carrollton, TX. A device 
suitable for use as the digital-audio converter 84 is 
available as TDA 1310 from Philips Semiconductor of 
Sunnyvale, CA. A device suitable for use as the NTSC 
encoder 86 is available as SAA 7188A from Philips 

35 Semiconductor. 
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As described above, the serial code 24 can be 
located either inside or outside the conventional mass- 
produced bar code. Particularly advantageous locations for 
the serial code 24 are outside of the mass-recorded data but 
5 within the physical range of and readable by the main read 
head 234. With further reference to Figs. 11, 12, and 15, 
an important and preferred configuration of the storage 
element (CD) 22 has the serial code 24 located within the 
main storage media 224 and outside of the mass-recorded 

10 data, the mass-recorded data being substantially confined 
within a boundary radius R, the serial code 24 occupying a 
narrow annulus of width AR as shown in Fig. 11. More 
particularly, the width AR can be within a "leadout" region 
226 as shown in Fig. 15, the leadout region 226 having 

15 special data thereon that characterizes that region. As 

further shown in Fig. 15, the leadout region 226 surrounds a 
main data region 228 that contains mass-recorded data of the 
work to be output from the terminal drive unit 20, the main 
data region 228 having an inside radius R x and an outside 

20 radius Rq. An annular "leadin" region 230 extends outwardly 
to the inside radius R I# the regions 226, 228 and 230 being 
within the main storage media 224. 

Figure 11 shows a process 300 for producing the CD 
22, including a master step 302 for preparing a master 

25 record, followed by a mass record step 304 in which 
counterparts of the master record are copied onto a 
multiplicity of substrates 222 having the main storage media 
224 thereon. Typically, the mass record step 304 can 
include press-molding the substrate 222, followed by 

30 applying a reflective metalization layer. It will be 

understood that the data can be recorded in encrypted form, 
and that the data can be differently encrypted on various 
ones of the substrate 222. 



35 



A serial izer apparatus 306 is then used in the 
process 300, the apparatus 306 having a counter 308 is 
incremented with the passage of each of the mass-recorded 
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substrates 222, feeding a serial number S n to an encrypter 
310. The serial number S n can range from 1 to N where N is 
the total number of mass recordings to be made from a single 
master. It will be understood that other protocols for the 
5 serial number are contemplated. The encrypter 310 scrambles 
the serial number, either alone or in combination with other 
information such as a work identifier and/or authorization 
level as discussed above, and feeds the resulting composite 
code to a shift register 312. The composite code is 

10 serially presented by the shift register 312 to a driver 314 
that feeds a selective radiation device such as a laser 
etcher 316 for selectively altering the main storage media 
224, thereby creating the serial code 24 of the CD 22. The 
laser etcher 316 can include a conventional fixed laser 

15 device that operates in conjunction with an acoustic optical 
modulator (AOM) and an optical focusing system to 
selectively irradiate a region of approximately 25 micron 
diameter sufficiently to etch the metalization layer of the 
CD 22, the CD 22 being rotated in a predetermined manner by 

20 a counterpart of the disk drive 236, designated 318. Thus, 
the process 300 in the exemplary configuration of Fig. 11 
includes the further steps of counting the CDS 22 for 
generating a unique serial number associated with each copy 
from the master, encrypting the serial number, and writing 

25 the encrypted result as the serial code 24 within the main 
storage media 224 of the completed CD 22. It will be 
understood that generation of the serial code 24 in a single 
pass as described above results in the width AR being 
approximately 25 microns. Alternatively, the focusing 

30 system of the laser etcher 316 can be configured for 

producing a radially narrower etch, and the serial code 24 
can be generated in multiple passes (rotations of the 
substrate 222) with the etching being done at progressively 
changing radii for forming the serial code 24 with the width 

35 AF being greater than the etching width by any desired 

amount. Further, the etching can be done in segments that 
are angularly dispersed for preserving sufficient 
information content of the "leadout" data to retain 
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functionality such as for servo head tracking. The disk 
drive 318 can include counterparts of the main read head 234 
and associated components (not shown) for verifying 
successful completion of the etching and initiating 
5 appropriate corrective action, if necessary. 

As further shown in Fig. 9, discussed above, the 
drive unit 20 includes a CD ROM mechanism 240 and a diode 
amplifier/laser supply 242, the diode amplifier thereof 
having a main output 244 that feeds a CD decoder 246 and a 

10 digital servo circuit 248 that controls the motion of the 
main read head 234 (Fig. 1A) • Figure 12 shows a preferred 
configuration of the drive unit 20 for use with the CDS 22 
as produced by the process 300. As with many conventional 
CD drives of the prior art, the main read head 234 is 

15 movable outwardly beyond the boundary radius R for purposes 
known to those having skill in the art, the main storage 
media of conventional CD elements also so extending. The 
drive unit 20 of Fig. 12 includes a preamplifier 250 that 
feeds a main amplifier 252, producing the main output 244 

20 for use as in Fig. 9, above, the preamplifier 250 and the 
main amplifier 252 together corresponding to the diode 
amplifier in the circuit block 242 in Fig. 9. In further 
accordance with the present invention, the diode amplifier 
counterpart of Fig. 12 has an auxiliary output 254 that is 

25 fed from upstream of the main amplifier 252, such as by an 
auxiliary amplifier 256 that is driven by the preamplifier 
250. 

It is contemplated that the data density of the 
serial code 24 is typically significantly lower than that of 

30 the mass-recorded data, and while the main amplifier 252 is 
best optimized for high frequencies over a limited 
bandwidth, it is preferred that the auxiliary output 254 
provide useful signals at a much lower frequency. Also, the 
preamplifier 250 is optional but, if present, it should not 

35 completely cut off signal components having frequencies 

below the bandwidth of the main amplifier 252. Further, in 
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implementations including the preamplifier 250 , the 
auxiliary amplifier 256 is optional. Moreover, while the 
output of the main amplifier 252 is typically digital 
(clipped or binary) , the output of the auxiliary amplifier 
5 256 can be analog (linear) or digital* 

With further reference to Figs. 13 and 14, another 
factor in detecting the auxiliary code 24 is that the 
reflectivity of the etched regions of the CD 22 is very much 
lower than that of data regions having a reflective coating 

10 on a flat surface that is interrupted by spaced pips of 

approximately 0,5 micron diameter. As shown in Fig. 13, the 
main amplifier 252 is responsive to a high first 
reflectivity 258 and a lower second reflectivity 260 of mass 
recorded data, the etched regions of the serial code 24 

15 presenting a very much lower third reflectivity 262. Thus 
the main amplifier 252 can be balanced to detect a data 
threshold reflectivity 264 that is between the first and 
second reflectivities 258 and 260. Similarly, the auxiliary 
amplifier 256 can be balanced to detect a serial code 

20 threshold reflectivity that is between the second and third 
reflectivities. Figure 14 shows in simplified form an 
implementation of the amplifiers 250, 252 and 256 that 
applies the above considerations. The main amplifier 252 in 
Fig. 14 has a main bandpass amplifier 268 that feeds a main 

25 comparator 270 having a data reference input D that 
corresponds to the data threshold reflectivity 264. 
Similarly, the auxiliary amplifier 256 includes an auxiliary 
bandpass amplifier 272 that feeds an auxiliary comparator 
having a serial code reference input C that corresponds to 

30 the serial code threshold reflectivity 266. It is 

contemplated that the bit rate of the main data is on the 
order of 50 times or more higher than that of the auxiliary 
data, thereby facilitating discrimination between signals 
output on the main output 244 and those output on the 

35 auxiliary output 254 using the bandpass amplifiers 268 and 
272. For example, it is contemplated that with the 
substrate 222 moving at a velocity of 3.27 meters/sec. 
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relative to the main read head 234, the mass recorded data 
has a channel bit rate of approximately 24 Mb its/ sec. , 
whereas the auxiliary data rate of the serial code 24 is 
approximately 164 Kbits/sec* 

5 As further shown in Fig. 15, dimensional 

parameters of presently contemplated DVD disks include a 
substrate outside diameter DS of 120 mm, the outside radius 
Ro of the main data region 228 being 58 mm maximum, the 
leadout region 226 having a maximum radius R L that is 58.5 mm 

10 maximum. A maximum "wobble" or eccentricity of recorded 
tracks of these DVD disks is 100 microns total, which 
includes 40 microns between the tracks and the locating 
diameter of the substrate 222, 40 microns for the disk drive 
236, and 2 0 microns for miscellaneous contributions such as 

15 variations in locating the substrate 222 on the disk drive 
236. It is further contemplated that the tracks are spaced 
approximately 1 micron center-to-center. Within these 
constraints, a preferred location of the serial code 24 is 
near the outside of the leadout region. In the exemplary 

20 case of the width AR being approximately 25 microns, the 

serial code 24 can be located between an inside radius Rl of 
approximately 58,455 microns and an outside radius R2 of 
approximately 58,480 microns. In one variation, the width 
AR is increased to approximately 125 microns for reliable 

25 detection without servo tracking, Rl being reduced to 

approximately 58,355 microns. As further shown in Fig. 15, 
the serial code 24 is preferably distributed in angularly 
spaced segments 24A, 24B, 24C, etc., with dummy data of the 
leadout region 226 being interspersed between the segments 

30 for enabling servo tracking of the main read head 234. 

Conclusion 

The system of the present invention provides the 
ability to shop at home by browsing through a wide variety 
of fully interactive multimedia catalogs, many of the items 
35 being illustrated using video, the items ordered being 

automatically shipped to the user's door. Also full length 
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purchasing the movie from a rental store, a small fee being 
billed to the user each time the movie is viewed, with the 
option to purchase unlimited private viewing rights. 

5 The system of the present invention also permits 

playing of video games and educational multimedia 
applications, such as multimedia encyclopedias, either with 
the addition of appropriate header information or by 
configuring the system 10 directly play CD ROM disks that 
10 are currently available for personal computers. The system 
10 can also be implemented to play open format CDs such as 
standard audio and video CDs as well as Kodak* Photo CDs, 
the photographic images being viewed on the user's home 
television. 

15 Although the present invention has been described 

in considerable detail with reference to certain preferred 
versions thereof, other versions are possible. For example, 
the CD elements 22 can be sold with authorization for a 
single play or multiple plays during a single time interval, 

20 with subsequent plays or authorized time intervals being 
contracted for using the transaction unit 18 as described 
above. The authorization can be for a predetermined number 
of plays in an unlimited time interval. Also, the option 
for unlimited play may omitted or offered based on switches 

25 that are down-loaded from the TPF 40. Similarly, the 
duration of specific play authorizations and pricing 
therefor can also be altered by down-loading switches. The 
CD elements can be provided without the unencrypted free 
preview portions. Set-up and/or operation of the 

30 transaction unit 18 can be implemented with communication to 
the TPF 40 initiated only by the transaction interface 28 
for avoiding audible rings on telephones that may be present 
on user premises. Further, software games can be developed 
specifically for the system 10, and the system 10 can 

35 include a cartridge slot for allowing the addition of 
electronics for the playing of games using third party 
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standards. Moreover, correlation of vendors with user 
transactions can be based on numbers of copies of particular 
works that each vendor contributed to (by creation, 
production, sale) . Therefore, the spirit and scope of the 
appended claims should not necessarily be limited to the 
description of the preferred versions contained herein. 
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CLAIMS 

1. An interactive multimedia system providing 
personalized transaction management, comprising: 

(a) a transaction terminal including: 

(i) a terminal drive unit for accessing at 
least one mass storage element containing recorded data; 

(ii) an audio/video output interface for 
feeding portions of the recorded data to one or more output 
devices ; 

(iii) a transaction interface for bidirectional 
electronic communications with an external facility; and 

(iv) terminal control means for activating the 
output interface and the transaction interface in response 
to operator input; 

(b) a transaction processing facility (TPF) 

including: 

(i) a database processor; and 
(ii) a terminal interface for bidirectional 
electronic communications between the transaction interface 
and the database processor; 

(c) means for correlating the mass storage 
element with a particular transaction; and 

(d) means for metering use of the element based 
on particulars of the transaction. 

2. The system of claim 1, wherein the TPF 
further comprises a provider interface for bidirectional 
electronic communications between a plurality of vendors and 
the database processor, the means for correlating is 
operative for identifying a particular one of the vendors, 
and the means for metering comprises means for crediting the 
particular one of the vendors by a predetermined amount 
based on usage of the mass storage element* 
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3. The system of claim 1, wherein the terminal 
control means includes a handheld remote control unit for 
receiving at least a portion of the operator input. 

4. The system of claim 1, wherein the 

5 transaction terminal further comprises a key memory for 

storing authorization data to be compared with user input, 
the control means inhibiting at least some operations of the 
first drive unit unless the user input matches a 
predetermined portion of the authorization data. 

10 5. The system of claim 4, further comprising 

means for updating the key memory using the transaction 
interface. 

6. The system of claim 4, wherein the 
authorization data includes a key code, and the means for 

15 correlating the mass storage element comprises an index of 

key codes and mass storage elements authorized for use under 
respective ones of the key codes. 

7. The system of claim 6, further comprising 
means for updating the index based on use of the mass 

20 storage element. 

8. The system of claim 6, wherein the index 
further comprises identification of vendors having 
prospective rights in the authorized use of the mass storage 
elements. 

25 9. The system of claim 8, wherein the mass 

storage element is one of a multiplicity of elements having 
the recorded data corresponding to identical information and 
including a work identifier, the terminal control means 
being operative for signalling the work identifier to the 

30 TPF using the transaction interface, the index having for 
each of the elements a unique serial identifier, the means 
for correlating the mass storage element further comprising: 
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(a) means for locating a particular serial 
identifier in the index using the work identifier and key 
code as signalled from the terminal drive unit; and 

(b) means for reading the particular one of the 
5 vendors from the index by association with the serial 

identifier. 

10. The system of claim 4, wherein the 
transaction terminal further comprises a key interface for 
interrogating an authorization key device. 

10 11. The system of claim 10, wherein the key 

device is an encoded card, the key interface being operative 
for signalling a key code from the card to the terminal 
control means. 

12. The system of claim 11, wherein the 

15 transaction terminal is operative for comparing the key code 
to a plurality of authorization codes, each of the 
authorization codes corresponding to a separate user 
account . 

13. The system of claim 11, wherein the key 
20 device includes read-write memory elements for storing 

transaction data. 

14. The system of claim 2, wherein: 

(a) the transaction terminal further comprises a 
key interface for interrogating an authorization key device 

25 for obtaining a key code; and 

(b) the system further comprises a plurality of 
sale terminals for use by at least some of the vendors to 
communicate with the TPF, each sale terminal having a key 
reader for reading the key code from the key device, the TPF 

30 having means for updating an index based on transactions 
with one possessing the card. 

15. The system of claim 10, wherein the key 
interface is operative for signalling a key code from the 
device to the terminal control means, and the means for 
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correlating the mass storage element comprises an index of 
key codes and mass storage elements authorized for use under 
respective ones of the key codes. 

16. The system of claim 15, wherein the mass 
5 storage element is one of a multiplicity of elements having 
the recorded data corresponding to identical information and 
including a work identifier, the terminal control means 
being operative for signalling the work identifier to the 
TPF using the transaction interface, the index having for 
10 each of the elements a unique serial identifier and a vendor 
identifier having prospective rights in the authorized use 
of the mass storage element under particular key codes, the 
means for correlating the mass storage element further 
comprising: 

15 (a) means for locating a particular serial 

identifier in the index using the work identifier and key 
code as signalled from the terminal drive unit; and 

(b) means for reading the vendor from the index 
by association with the serial identifier. 

20 17. The system of claim 1, wherein the mass 

storage element is one of a multiplicity of elements having 
the recorded data corresponding to identical information, 
each of the elements also having a unique machine-readable 
serial identifier, the terminal drive unit comprising means 

25 for signalling the serial identifier to the terminal control 
means, the means for correlating the mass storage element 
comprising: 

(a) an index of serial identifiers associated 
with particular vendors; 
3 0 (b) means for comparing a particular serial 

identifier as signalled from the terminal drive unit with 
serial identifiers of the index; and 

(c) means for reading the particular one of the 
vendors from the index in response to the means for 

35 comparing. 
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18. The system of claim 17, wherein the serial 
identifier is a bar code, and the means for signalling the 
serial identifier comprises a bar code reader. 

19. The system of claim 17, wherein the index 
5 includes stored use fee data associated with the serial 

identifiers, and the means for metering includes means for 
debiting a user account and crediting a vendor account 
according to the use fee data. 

20. The system of claim 2, further comprising a 
10 plurality of vendor terminals for use by at least some of 

the vendors to communicate with the TPF, each vendor 
terminal having a serial ID reader for reading serial 
identifiers associated with mass storage elements, the TPF 
having means for updating the index based on communications 
15 from the vendor terminals. 

21. The system of claim 20, wherein at least 
some of the vendor terminals further comprise a key reader 
for reading a key code from a device possessed by a 
purchaser of the mass storage element. 

20 22. The system of claim 1, wherein the recorded 

data of the mass storage element includes vendor 
information, and wherein the transaction terminal further 
comprises means for receiving and storing information 
updates from the TPF using the transaction interface, and 

25 usage of the mass storage element includes feeding the one 
ore more output devices based on a combination of portions 
of the recorded data and the information updates. 

23. The system of claim 22, wherein usage of the 
mass storage element includes selecting and ordering catalog 
30 items, the information updates include catalog updates, the 
system further comprising means for signalling and 
confirming catalog orders using the transaction interface. 



24. The system of claim 22, wherein the 
transaction terminal further comprises a key memory for 
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storing authorization data to be compared with user input, 
the control means inhibiting at least some functions of the 
terminal drive unit unless the user input matches a 
predetermined portion of the authorization data. 

5 25. The system of claim 22, wherein the 

transaction terminal includes means for comparing header 
information of the mass storage element with predetermined 
data for verifying authenticity of the information, and 
means for inhibiting at least some functions of the terminal 
10 drive unit unless at least a portion of the header 
information matches the predetermined data. 

26. The system of claim 1, wherein the mass 
storage element is one of a multiplicity of elements having 
the recorded data corresponding to identical information, 

15 each of the elements also having a unique machine-readable 
serial identifier, the terminal drive unit comprising means 
for signalling the serial identifier to the terminal control 
means based on use of each of the corresponding elements, 
the means for correlating the mass storage element 

20 comprising: 

(a) an index of serial identifiers authorized 
for use by particular users; and 

(b) means for determining uses of the elements 
by comparing a particular serial identifier as signalled 

25 from the terminal drive unit with serial identifiers of the 
index . 

27. The system of claim 26, wherein the 
identifier includes authorization status information. 

28. The system of claim 27, wherein at least a 
3 0 portion of the serial identifier is capable of being 

recorded by the terminal drive unit, the system being 
capable of updating the authorization status information of 
the serial identifier in response to a user's transaction. 
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29. The system of claim 26, wherein the mass 
storage element is a CD-R disk, and the serial identifier is 
recorded together with other recorded data on the mass 
storage element* 

5 30. A memory system comprising a drive unit for 

accessing at least one mass storage element containing 
recorded data, wherein the mass storage element is one of a 
multiplicity of elements having the recorded data 
corresponding to identical information in a main data 

10 region, each of the elements also having a unique machine- 
readable serial identifier located outside of the main data 
region, the system having an output interface for feeding 
portions of the recorded data to one or more output devices, 
and means for signalling the serial identifier from the 

15 drive unit to an external device. 

31. The system of claim 30, wherein the drive 
unit includes a data head movable relative to the mass 
storage element for reading at least a portion of the 
recorded data, the data head also being operable for 

2 0 scanning the serial identifier. 

32. The system of claim 30, further comprising a 
controller for operating the drive unit and having: 

(a) means for receiving operator input; and 

(b) means for accessing authorization data, 
25 the controller inhibiting at least some 

operations of the drive unit unless the user input matches a 
predetermined portion of the authorization data. 

33. The system of claim 30, wherein the means 
for signaling the serial identifier is operative when at 

30 least a portion of the serial identifier is contained in a 
single auxiliary data track having a plurality of auxiliary 
data bits of the serial identifier. 
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34. The system of claim 33, wherein means for 
signaling is operative when the single auxiliary data track 
contains at least 200 auxiliary data bits. 

35. The system of claim 33 , wherein the means 
5 for signaling is operative when the serial identifier 

contains at least 200 auxiliary data bits. 

36. The system of claim 33, wherein the means 
for signaling is operative when the serial identifier 
contains approximately 2000 auxiliary data bits. 

10 37. The system of any of claims 30-36, wherein 

the means for signaling is operative when the serial 
identifier is located within a leadout region of the mass 
storage element. 

38. The system of claim 26 or 30, further 

15 comprising means for determining use of pirated counterparts 
of the elements, comprising: 

(a) means for storing data corresponding to uses 
of elements having particular serial identifiers; and 

(b) means for determining incredulous uses based 
20 on one or more of an elapsed time between successive uses 

involving the same serial identifier, the occurrence of 
simultaneous uses, geographic distances between locations of 
successive uses, and operator input. 

39. The system of claim 38, wherein the recorded 
25 data of the mass storage element includes a work identifier, 

and wherein the means for determining incredulous uses is 
further based on correlation of the work identifier with a 
corresponding work identifier of the index. 

40. The system of claim 38, further comprising: 
30 (a) an index of authorized serial identifiers; 

and 

(b) means for determining uses of the elements 
by comparing a particular serial identifier as signaled from 
the drive unit with serial identifiers of the index. 
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41. The system of claim 40, wherein the index 
has the serial identifiers associated with particular users. 

42. The system of claim 41, further comprising 
means for determining a key code for the drive unit, and 

5 wherein the means for determining incredulous uses is 
further based on correlation of the key code with user 
identifiers of the index. 

43. The system of claim 41, further comprising 
means for receiving user input, and wherein the means for 

10 determining incredulous uses is further based on correlation 
of the user input with user identifiers of the index. 

44. The system of claim 30, further comprising 
means for receiving user input, and means for maintaining an 
index of user codes corresponding to the user input, the 

15 index including counterparts of unique serial identifiers 
for mass storage elements authorized for use under 
respective ones of the user codes, the system being 
operative for preventing unauthorized uses of the elements. 

45. The system of claim 44, wherein the recorded 
20 data of the mass storage element includes a work identifier, 

the system being operative for signaling the work identifier 
to the external device, the system being operative for 
transmitting authorization code to the external device for 
use in conjunction with the recorded data of the mass 
25 storage element. 

46. The system of claim 30, further comprising: 

(a) an index of element identifiers 
corresponding to the serial identifiers of the elements; 

(b) means for comparing a particular serial 

30 identifier as signaled from the drive unit with the element 
identifiers of the index; and 

(c) means for enabling use of the recorded data 
in response to the means for comparing. 
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47. The system of claim 46, wherein the serial 
identifier is a bar code, and the means for signaling the 
serial identifier comprises a bar code reader. 

48. The system of claim 26, 30, 44, or 46, 

5 wherein the mass storage element is selected from the group 
consisting of a CD-ROM disk, a CD-I disk, a CD-R disk, a CD- 
V disk, a video CD, a photo CD, a CD-DA, and a DVD disk, and 
the drive unit is a compact disk drive. 

49. A method for reading mass-produced recorded 
10 media while preventing unauthorized uses thereof, comprising 

the steps of: 

(a) producing recorded copies of particular 
works on respective media elements; 

(b) providing on each element a unique machine- 
15 readable serial identifier; 

(c) providing a device for reading the recorded 
media in conjunction with authorization data, the device 
also having means for reading the serial identifier; 

(d) maintaining an index of valid authorization 
20 codes associated with particular ones of the serial 

identifiers; 

(e) reading the serial identifier in connection 
with attempted reading of a copy; 

(f) receiving a proposed authorization code; 
25 (g) conditionally providing the authorization 

data to the device based on matching the proposed 
authorization code with a valid authorization code from the 
index for the particular serial identifier of the copy; and 
(h) reading the copy as augmented by the 
3 0 authorization code. 

50. A method for metering permitted uses of 
recorded media according to the method of claim 49, 
comprising the further steps of: 

(a) forming the index to include authorization 
35 levels for particular copies; 
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(b) debiting the authorization levels based on 
successive uses of the media; 

(c) crediting the authorization levels based on 
transactions involving the particular copies; and 

5 (d) conditioning the enabling based on the 

authorization levels. 

51* The method of claim 50 , comprising the 
further step of maintaining at least a counterpart of the 
authorization level for a particular copy in machine- 
10 readable form on the copy. 

52. The method of any of claims 49-51, wherein 
the step of producing recorded copies includes the further 
step of encrypting the works, and the step of reading the 
copy includes the further step of decrypting the copy using 

15 a portion of the authorization code. 

53. A mass storage element comprising: 

( a ) a substrate ; 

(b) a main storage media on the substrate 
storing a multiplicity of main data elements in a main data 

20 region thereof, the main data elements being readable by 
data head means when the data head means moves in a 
predetermined main path relative to the substrate; and 

(c) an auxiliary storage media on the substrate 
for recording and storing a plurality of auxiliary data 

25 elements outside of the main data region, the auxiliary data 
elements being readable by auxiliary head means when the 
auxiliary head means moves in a predetermined auxiliary path 
relative to the substrate. 

54. The mass storage element of claim 53, 
30 wherein at least a portion of the serial identifier is 

contained in a single auxiliary data track having a 
plurality of auxiliary data bits of the serial identifier. 
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55. The mass storage element: of claim 54, the 
single auxiliary data track containing at least 200 
auxiliary data bits. 

56. The mass storage element of claim 54, 
5 wherein the serial identifier contains at least 200 

auxiliary data bits. 

57. The mass storage element of claim 54, 
wherein the serial identifier contains approximately 2000 
data bits. 

10 58 . The mass storage element of claim 53 , 

wherein the main data elements are substantially read-only 
in character. 

59. The mass storage element of claim 58, 
wherein the main storage media is adapted for receiving the 

15 main data elements by press-molding. 

60. The mass storage element of claim 53, 
wherein the main storage media is adapted for receiving the 
main data elements by selective radiation. 

61. The mass storage element of claim 53, 
20 wherein the main data elements are optically readable. 

62 . The mass storage element of claim 53 , 
wherein the substrate and the main storage media are 
configured as a rotatable compact disk. 

63. The mass storage element of claim 53, 

25 wherein the auxiliary storage media is adapted for being 
recorded and read by a single auxiliary head. 

64. The mass storage element of claim 63, 
wherein the auxiliary storage media is a magnetic coating. 

65. The mass storage element of any of claims 
30 53-62, wherein the auxiliary storage media is adapted for 
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receiving the auxiliary data elements by selective 
radiation. 

66. A mass storage drive incorporating the mass 
storage element of claim 53, and further comprising: 

5 (a) means for removably supporting the mass 

storage element; 

(b) a data head for reading the main data 

elements ; 

(c) auxiliary head means for reading the 
10 auxiliary data elements; and 

(d) drive means for moving the substrate in a 
predetermined path relative to the data head and the 
auxiliary head means for operation thereof. 

67. The mass storage drive of claim 66, wherein 
15 the data head is an optical head. 

68. The mass storage drive of claim 67, wherein 
the auxiliary head means comprises a magnetic head, the 
drive further comprising means for writing at least a 
portion of the auxiliary data elements using the magnetic 

2 0 head . 

69. The mass storage drive of claim 66, wherein 
the auxiliary head means comprises an optical head. 

70. The mass storage drive of claim 66, wherein 
the auxiliary head means comprises means for moving the data 

25 head in the predetermined auxiliary path relative to the 
substrate, the data head being operative for scanning the 
auxiliary data elements. 

71. The mass storage drive of claim 70, further 
comprising a head circuit including a main amplifier having 

3 0 a main output for signaling the main data elements in 

response to the data head, the circuit also having a 
separate auxiliary output for signaling the auxiliary data 
elements in response to the data head. 
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72. The mass storage drive of claim 71, the head 
circuit further comprising an auxiliary amplifier for 
driving the auxiliary output in response to the data head. 

73. The mass storage drive of claim 72, the main 
5 amplifier having a first frequency response effective for 

passing the main data elements, the auxiliary amplifier 
having a second frequency response for passing the auxiliary 
data elements, the second frequency response substantially 
blocking the main data elements. 

10 74. The mass storage drive of claim 72, the main 

amplifier having a first reference connection effective for 
balancing the main output relative to a data threshold 
output of the data head when the data head is reading the 
main data elements, the auxiliary amplifier having a second 

15 reference connection effective for balancing the auxiliary 
output relative to a serial code threshold output of the 
data head when the data head is reading the auxiliary data 
elements. 

75. The mass storage drive of any of claims 66- 
20 74, wherein the mass storage element is a compact disk, and 

the drive means comprises means for rotating the disk. 

76. A method for making a serialized 
multiplicity of mass storage elements having mass-recorded 
data representative of identical information, comprising the 

25 steps of: 

(a) preparing a master record; 

(b) recording counterparts of the master record 
onto a multiplicity of mass-storage elements having 
respective main data regions; 

30 (c) generating a unique serial number associated 

with each recording from the master; and 

(d) writing a serial code corresponding to the 
serial number on each corresponding mass-storage element by 
selectively altering the mass-storage element outside of the 

35 main data region thereof, thereby serializing the elements. 
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77. The method of claim 76, comprising the 
further step of encrypting the serial number, respective 
serial codes of the elements corresponding to the serial 
numbers as encrypted. 

5 78. The method of claim 76 , wherein the step of 

writing the serial code comprises selectively radiating the 
mass storage elements. 

79. The method of claim 76, 77, or 78, wherein 
each mass storage element has a control region outside of 

10 the main data region, and the step of altering the mass 

storage elements comprises selectively altering the control 
region thereof. 

80. The method of claim 79, wherein the step of 
altering is performed in sufficiently spaced relation to the 

15 main data region for preserving functionality of the control 
region adjacent the main data region. 

81. The method of claim 79, wherein the step of 
altering comprises the further steps of altering separate 
sub-regions of the control region corresponding to 

20 respective portions of the serial code, and spacing the sub- 
regions sufficiently apart within the control region for 
preserving functionality of the control region. 

82. The method of claim 79, wherein the mass- 
storage elements are compact disks, the control region is a 

25 leadout region having characteristic data recorded thereon, 
and the step of altering comprises the further steps of: 

(a) rotating each of the disks; 

(b) modulating an etching device with 
counterparts of the serial codes; and 

30 (c) directing radiation from the etching device 

within the leadout region of each of the disks. 
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